xen00rw

uBlock

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

facefusion

Industry leading face manipulation platform

windows

Windows inside a Docker container.

awesome-privacy

🦄 A curated list of privacy & security-focused software and services

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

MailSniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

Inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

HTTPLeaks

HTTPLeaks - All possible ways, a website can leak HTTP requests

broken-link-checker

Find broken links, missing images, etc within your HTML.

reFlutter

Flutter Reverse Engineering Framework

GooFuzz

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

wapiti

Web vulnerability scanner written in Python3

TREVORspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

VAmPI

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

secDevLabs

A laboratory for learning secure web and mobile development in a practical manner.

decrypt-chrome-passwords

subscraper

Subdomain and target enumeration tool built for offensive security testing

ipranges

🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.

Frida-Mobile-Scripts

Collection of useful FRIDA Mobile Scripts

PHP-WebShell-Bypass-WAF

分享PHP WebShell 绕过WAF 的一些经验 Share some experience about PHP WebShell bypass WAF and Anti-AV

jsluicepp

jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

FireBaseScanner

The scripts helps security analsts to identify misconfigured firebase instances.

c2hack

C2Hack, sharing tips and tricks for pentesters

LogCatch

android adb logcat viewer for Linux/Mac/Windows

jsmug

A PoC code for JSON Smuggling technique to smuggle arbitrary files through JSON

subdominex